instead of getting the current ip address for each of my subdomains to put it into an AAAA record, i'm now only doing it once and then using a wildcard CNAME to direct all subdomains to the root domain.
my #octodns service was failing quite a few times per day (ok yeah it runs once per minute) and i believe it might have been some bruteforce protection of the external site that it uses to get the external ip address.
i hope this isn't going to bite me back in the future, but you can never know with #dns ;)

bleh i thought my #ipv6 prefix would be very stable, but apparently it isn't.

i haven't confirmed yet, but it probably changes every time the router reboots. that shouldn't happen too often, but it does happen occasionally and thus is not reliable enough for a server.

i was planning to use #octodns anyway, so i think https://github.com/octodns/octodns-ddns will do the trick. with a low TTL of 1 minute it should be reliable enough 🤞

just a bit annoying, that then the dns settings are applied by the server and not my desktop as part of the overall configuration (but there is no other way if the ip can change randomly).

GitHub - octodns/octodns-ddns: A simple Dynamic DNS source for octoDNS.

A simple Dynamic DNS source for octoDNS. Contribute to octodns/octodns-ddns development by creating an account on GitHub.

GitHub
Yay #Octodns now supports configuring TLSA records for @gandi , thanks to @yzguy https://github.com/octodns/octodns-gandi/pull/36 🥳
TLSA record support by yzguy · Pull Request #36 · octodns/octodns-gandi

#35 Add support for TLSA records /cc @onny, will need someone to live test this because apparently you need a domain registered with Gandi to use their DNS, which I no longer have

GitHub
The power of choice 😉 After adding #NixOS wiki articles about #Dnscontrol and #Octodns, tools for managing DNS records, both articles reference each other now 🔗 https://nixos.wiki/wiki/Octodns
Octodns - NixOS Wiki

Added an article on #OctoDNS to the #NixOS wiki with example usage to configure Gandi DNS 🗒️ https://nixos.wiki/wiki/Octodns
Octodns - NixOS Wiki

Mon nom de domaine principal, actuellement hébergé chez #gandi, arrive à échéance.

Vu qu'on ne peut plus compter sur eux, je vais partir chez un registrar moins cher.
Ça devrait être #OVH, vu que j'ai besoin d'un provider supporté par #OctoDNS et #certmanager, je n'ai pas trouvé mieux pour le moment.

Lesetipps: Staatliche Zwangsfilter in allen Betriebssystemen​

In unseren Lesetipps erfahren wir heute, wie der Staat die Jugend mit Zwangsfiltern vor dem "ach so bösen" Internet schützen will.

Tarnkappe.info

Still need to write it up, but moved to OctoDNS via the new NixOS-DNS flake. Now Nix is the source of truth. `A` and `AAAA` records match the network config. `CNAME` matches Nginx virtual hosts. `SRV` records are structured. It's lovely.

https://janik-haag.github.io/NixOS-DNS/

#NixOS #OctoDNS #DecemberAdventure

Summary - NixOS-DNS

Wir durften die Firma Weblaw
bei der Modernisierung ihrer DNS-Infrastruktur unterstützen. Wir nutzten dabei #OctoDNS als Single Source of Truth und unser KnowHow für #Cloud-Technologien. Mehr Infos zu diesem spannenden Projekt gibt es hier:
https://www.puzzle.ch/referenzen/der-weg-in-die-saas-welt
Der Weg in die SaaS-Welt

Puzzle unterstützte Weblaw bei der Modernisierung ihrer DNS-Infrastruktur durch den Einsatz von OctoDNS als Single Source of Truth und mit einer cloudfähigen SaaS-Lö

Puzzle ITC

@sebsauvage je suis aussi en train de me poser la question (j'ai 2 domaines chez Gandi).

Par contre autant il existe un plugin #certbot pour #infomaniak, ainsi qu'un webhook pour cert-manager sur K8s, il me manquerait un provider pour #OctoDNS.

Du coup je suis tenté de commencer à en développer un :)